Professional / Community 2025.2.1

Summary: PortSwigger released Burp Suite Professional and Community 2025.2.1 on 24 February 2025, adding the ability to scan Postman Collections (v2.1.0) so Burp parses requests, authentication methods, parameters, and collection variables for API coverage. The release also fixes a bug where opening Burp's browser settings could crash the browser, and upgrades Burp's browser to Chromium 133.0.6943.127 on Windows and Mac and 133.0.6943.126 on Linux.
What you should know: API coverage now depends on whether your team's Postman collections get scanned at all, since the feature is limited to Burp Suite Professional - anyone running Community is testing APIs without it.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026